Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa
File:                     9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa (raw, json)
Hash identifier:          qtWgKs3hj94jScevEVXUUhLaFBwYIAloIb49wHNSd74=
Subject key identifier:   CD:32:F1:8C:DB:84:6B:23:FD:18:74:72:88:C1:13:8C:84:88:B6:91
Certificate issuer:       /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial:       010D0C9F4328584BBFA5A56662D45412751BDF40
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     8014
IP address blocks:        104.166.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:a5:66:62:d4:54:12:75:1b:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=0499418c-0e0c-4118-880e-197a06b74b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cb:26:33:66:64:ca:41:ab:2a:21:e9:9a:27:
                    02:dd:e7:9c:e0:f9:a4:fd:dd:30:a5:9a:ab:6c:cb:
                    d3:a0:47:f7:6f:2b:19:a3:9b:bc:cf:c3:07:74:b2:
                    f5:c2:f0:ce:6f:e0:38:3e:ae:eb:d4:db:e7:26:b7:
                    2d:a6:13:03:84:89:f9:df:45:87:86:77:96:1f:8b:
                    17:5f:20:7b:5d:30:fa:c5:90:eb:66:d3:30:2a:37:
                    07:5a:5e:28:87:7b:84:6f:2d:22:be:1b:82:f3:33:
                    30:98:72:a2:0d:e9:ee:bb:88:6e:bd:fb:11:a1:b7:
                    07:eb:7f:d9:52:fd:0b:05:22:e7:1a:b2:fc:ca:4f:
                    f5:82:4f:2c:b9:12:6f:a6:2d:99:8a:20:e7:64:47:
                    b7:65:58:b7:f8:a5:8f:aa:9b:67:83:cd:6d:90:30:
                    19:02:a7:5e:a6:38:37:eb:95:c0:09:b3:5d:d4:20:
                    97:1f:c5:38:2c:fe:90:85:2a:cf:af:41:e3:d7:4f:
                    2a:a9:c2:b6:40:29:21:d8:cb:60:f4:7c:38:29:ca:
                    e8:79:62:f3:bf:5e:06:c4:d6:64:13:1e:5e:8f:07:
                    22:b9:70:20:d2:9c:b2:b4:52:ef:60:a1:d6:e2:a9:
                    10:32:29:4f:53:9b:6b:91:5e:ef:b5:5e:a1:55:63:
                    a7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:32:F1:8C:DB:84:6B:23:FD:18:74:72:88:C1:13:8C:84:88:B6:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:f8:3a:c2:fc:ee:5b:d2:b7:1d:ac:0d:e5:36:bd:bc:f9:28:
         15:71:49:25:fa:7d:38:fe:3a:90:a0:b7:0a:a5:71:2b:0e:fe:
         ea:5b:f0:21:5e:75:bb:56:36:0e:06:8c:20:61:25:b2:7b:e7:
         4b:38:3e:db:a2:8d:78:9d:8b:10:84:1b:77:fa:41:9f:f2:0c:
         3e:c1:32:3c:f8:8c:a5:a9:76:82:cd:dd:e9:0e:42:e1:a4:f0:
         c8:b8:d9:12:a5:28:9b:0b:08:91:a6:06:2f:a9:4e:75:a0:4b:
         c8:e2:43:30:fb:0b:c2:af:d7:0d:61:3d:a8:ea:b8:c0:99:aa:
         18:6a:1f:1e:f8:5f:e4:cc:b9:89:fd:37:93:fb:a3:e8:ef:f6:
         e5:a9:61:2b:30:a1:e0:09:ec:b1:91:a6:f4:4e:c7:fb:a0:8a:
         d0:63:23:77:fc:ab:8b:5a:c9:34:1f:93:47:2e:c6:66:9b:a2:
         09:ad:c4:e9:ca:b7:a4:1d:56:f5:60:39:7f:85:cc:d8:7c:b7:
         28:d0:39:69:f6:72:d0:a4:01:31:f6:38:ba:e5:ec:eb:09:c9:
         b2:93:f2:cb:a9:ac:53:0a:aa:2f:10:69:30:61:0a:25:d5:cf:
         17:d5:df:08:3d:a3:c3:fc:f2:e7:f1:a5:70:25:09:1c:fa:49:
         d5:11:da:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/paVmYtRUEnUb30AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz
Zjc1MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk
MDQ5OTQxOGMtMGUwYy00MTE4LTg4MGUtMTk3YTA2Yjc0Yjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8smM2ZkykGrKiHpmicC3eec4Pmk/d0wpZqr
bMvToEf3bysZo5u8z8MHdLL1wvDOb+A4Pq7r1NvnJrctphMDhIn530WHhneWH4sX
XyB7XTD6xZDrZtMwKjcHWl4oh3uEby0ivhuC8zMwmHKiDenuu4huvfsRobcH63/Z
Uv0LBSLnGrL8yk/1gk8suRJvpi2ZiiDnZEe3ZVi3+KWPqptng81tkDAZAqdepjg3
65XACbNd1CCXH8U4LP6QhSrPr0Hj108qqcK2QCkh2Mtg9Hw4KcroeWLzv14GxNZk
Ex5ejwciuXAg0pyytFLvYKHW4qkQMilPU5trkV7vtV6hVWOn5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM0y8YzbhGsj/Rh0cojBE4yEiLaRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk
MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvOWZhODE2Y2YtZjc0Mi0z
OGI4LWFiYzMtYjZlNmNhYzA4ODFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj
NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5
M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm
Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKYgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJr4OsL87lvStx2sDeU2vbz5KBVxSSX6fTj+OpCgtwqlcSsO/upb8CFe
dbtWNg4GjCBhJbJ750s4PtuijXidixCEG3f6QZ/yDD7BMjz4jKWpdoLN3ekOQuGk
8Mi42RKlKJsLCJGmBi+pTnWgS8jiQzD7C8Kv1w1hPajquMCZqhhqHx74X+TMuYn9
N5P7o+jv9uWpYSswoeAJ7LGRpvROx/ugitBjI3f8q4tayTQfk0cuxmabogmtxOnK
t6QdVvVgOX+FzNh8tyjQOWn2ctCkATH2OLrl7OsJybKT8suprFMKqi8QaTBhCiXV
zxfV3wg9o8P88ufxpXAlCRz6SdUR2lk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:20:26 2025 by rpki-client